Md. Code, Commercial Law § 14–4811

Notwithstanding any other law, a data protection impact assessment is protected as confidential and shall be exempt from public disclosure, including under the Maryland Public Information Act.